Signed just now
squareup.com
Psychevus attests that on 2026-11-07 19:05 UTC the public DNS of squareup.com showed the records below, earning grade C.
- Grade
- C · 70/100 (3 of 3 inbox checks pass)
- DMARC
- v=DMARC1; p=reject; rua=mailto:dmarc_agg@vali.email,mailto:postmasters@squareup.com,mailto:square-dmarc@datafeeds.phishlabs.com; ruf=mailto:dmarc-ruf@squareup.com,mailto:square-dmarc@datafeeds.phishlabs.com
- SPF
- v=spf1 include:squareup.com._nspf.vali.email include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email include:stspg-customer.com ~all (3 of 10 lookups)
- DKIM
- k1 (RSA 1024-bit), s1 (RSA 2048-bit), s2 (RSA 1024-bit), k2 (RSA 2048-bit), k3 (RSA 2048-bit), mandrill (RSA 1024-bit)
- MX
- aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com, aspmx2.googlemail.com, aspmx3.googlemail.com, aspmx4.googlemail.com, aspmx5.googlemail.com
- MTA-STS
- off
- DANE
- off
- TLS-RPT
- off
- DNSSEC
- off
- CAA
- off
- BIMI
- off
How it works
What it proves
That Psychevus read your domain’s public DNS at the stated time and saw exactly these records and this grade. It’s a statement about public facts, so no login or domain verification is needed — and it can’t be edited: the Ed25519 signature covers every character.
Who it’s for
Vendor security questionnaires that ask “do you enforce DMARC?”, cyber-insurance applications, auditors, and agencies handing a fixed domain back to a client. Send the link; they verify it in one click, or offline.
Verify it yourself
The proof is a standard JWS. Fetch the keys from /.well-known/psychevus-proof-keys.json and check it with any JOSE library, e.g. jose.compactVerify(token, key) in JavaScript, or call /api/v1/proof?token=….